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Abstract 


This paper explores a class of multiple-model-based fault detection and identification 
(FDI) methods for bias- type faults in actuators and sensors. These methods employ 
banks of Kalman-Bucy filters to detect the faults, determine the fault pattern, and 
estimate the fault values, wherein each Kalman-Bucy filter is tuned to a different 
failure pattern. Necessary and sufficient conditions are presented for identifiability 
of actuator faults, sensor faults, and simultaneous actuator and sensor faults. It is 
shown that FDI of simultaneous actuator and sensor faults is not possible using these 
methods when all sensors have biases. 


1 Introduction 

Failures in control effectors and sensors can cause poor performance or instability 
in dynamical systems. In particular, faults in flight control systems for aircraft or 
spacecraft can lead to loss of control and serious incidents. Therefore, rapid fault 
detection and identification (FDI) in actuators and sensors is important for enhancing 
flight safety. One approach to actuator and sensor FDI is based on multiple-model 
methods [1], [2], which have been extended to detect faults and identify the fault 
pattern as well as the fault values [3], [4], Such methods typically use banks of 
Kalman-Bucy filters (or Extended Kalman filters) and multiple hypothesis testing, 
and have been reported to be effective for bias-type faults such as aircraft control 
surfaces getting stuck at unknown values, or sensors (e.g., rate gyros) that develop 
unknown constant or slowly- varying biases. The underlying requirement for these 
methods is that the faults should be identifiable. Identifiability of bias-type faults 
was considered in [4] and preliminary results were presented. This paper focuses in 
greater detail on the identifiability of actuator faults, sensor faults, and simultaneous 
actuator and sensor faults. 


2 Actuator Faults 

Consider a linear time-invariant system: 

x = Ax + Bu + w p 

y = Cx + w s (1) 

where x £ R n , u £ R m , w p £ R n ,y £ R l , w s £ R l denote the state vector, control 
vector, process noise, output vector, and sensor noise respectively, and A, B, C are 
appropriately dimensioned matrices. w p and w s are usually assumed to be stationary 
zero-mean Gaussian processes having constant covariance intensities. 

Of the m actuators in the system, some may fail at unknown time instants. The 
type of actuator failure addressed in this paper is a “stuck actuator” failure, which 
produces a constant unknown input value (which is zero in the case of complete 
actuator outage). Thus, in the fcth failure pattern, if of the m actuators fail, the 


1 



system dynamics becomes 


x = Ax + E h jUj + E bjUj + w p 

j£Fak j^Fak 

= Ax-h B k u k + B k u k + w p 


(2) 


where J- a k is the set of indices corresponding to the failed actuators, and Uj denotes 
the corresponding failure value (for example, deflection of a stuck control surface in 
aircraft). There are up to 2 m — 1 possible failure patterns for m actuators. u k G 
R m k denotes the failure value for the kth failure pattern; u k G R m ~ mk denotes the 

k 

input vector corresponding to the functioning actuators; B denotes the columns 
of B corresponding to the failed actuators B k denotes the remaining columns of B 
corresponding to the functional actuators. 

In multiple-nro del-based methods, up to 2 m mathematical models (including the 
“no failures” case and up to 2 m — 1 failure patterns) are constructed from (2) and a 
corresponding bank of 2 m Kalman-Bucy filters is designed. The fault is isolated and 
the fault values Uj are estimated by augmenting (2) with: 


uj = w aj (3) 

where w a . is a fictitious zero-mean white noise process. Thus the augmented equation 
corresponding to model k (failure pattern k) is 


d 

X 


A B k 

( x \ 

- B k - 

dt 

u k _ 


0 0 

(u k ) + 

0 


u k + w k 


( 4 ) 


where w k G R n+m ' k denotes the input noise vector consisting of the process noise w p 
and the fictitious noise corresponding to u k . Denoting 





( 5 ) 


the system corresponding to failure pattern k is expressed as 

£* = A\t + B\u k + w k ( 6 ) 

y = [C0}^ k + w s :=C^ k + w s (7) 

where A k , B |’ are the augmented system- and input-matrices from (4). 

The FDI approach employed in multiple-model-based methods is to design and 
implement a bank of Kalman-Bucy filters (KBF), one corresponding to each of the 
2 m models, and to determine (in real time) which model correctly represents the 
actual fault pattern, using criteria such as highest conditional probability or the 
smallest residual norm. The KBF corresponding to the correct model also gives an 
unbiased minimum-variance estimate of the fault values. The KBF corresponding to 
model k is given by 

= A\i k + B\u k + H k {y - C\i k ) (8) 
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where denotes the estimate of £ fc and H k (a function of time) is the KBF gain. 
From (6) and (8), the estimation error dynamics are given by 

= {A\ - H k C\)i k + w k - H k w s ( 9 ) 

where _ £&. The residual (which is used in decision-making to determine 

which fault model is “closest” to the actual system), is given by 

n = y - C\i k = C k e + w s (10) 

For the scheme to work, the error dynamics ( 9 ) must be asymptotically stable and 
unbiased, i.e., the mean of £ k should converge to zero and its covariance should be 
bounded Vi > 0. 

h 

For failure pattern k, if B is not of full rank, it is not possible to distinguish 

between fault values for actuators corresponding to linearly dependent columns of 


B . For example, for some failure pattern, if 

B = [61,62,63] 

and if 63 = ai&i + 0:262 for some constant oi, 02, the input terms due to the failed 
actuators are 


Bu = b\ui + & 2 u 2 + 63U3 

= 6i(ui + O 1 U 3 ) + 62(^2 + Q!2«3) (11) 

Thus only the aggregated fault values u\ + 01^3, U2 + a 2^3 can be estimated, and 
u \ , U2, U3 cannot be estimated individually. Therefore it is assumed henceforth that, 
for each failure mode, the fault inputs corresponding to linearly dependent columns 

fc 

of B have been aggregated and that B is of full rank. As a result, the number 
of distinguishable failure patterns (and the corresponding Kalman-Bucy filters) is 
usually less than 2 m — 1 . 

2.1 Actuator Fault Identifiability 

For the Kalman-Bucy filter to work correctly, observability of the augmented sys- 
tem ( 6 ), ( 7 ) is essential. Unobservability can result in grossly erroneous estimates of 
the augmented state vector and incorrect FDI. Furthermore, in the infinite duration 
case, a KBF gain (constant) H k that stabilizes the system matrix in ( 9 ) exists only 
if is detectable, which is possible only if the the augmented zero-frequency 

modes of A £ are observable. Thus, the observability rather than detectability of 
(C%, Af:) is important. The following theorem gives a necessary and sufficient condi- 
tion for observability. 

Theorem 1 . The pair ( C k ,A k ) is observable iff all of the following conditions are 
satisfied: 


(i) l > m k 

(ii) the pair (C, A) observable, and 
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-=r*\ 


(iii) the system (C, A , B ) has no zeros at the origin. 

Proof. Applying the PBH rank test [5], [C^, A|] is observable iff 


rank 


si -A -B k 


0 

C 


sL 


m k 

0 


= n + nrik for s = A(A) and s = 0 


(12) 


where A(.) denotes eigenvalue. The first n columns of the PBH test matrix are 
independent (for all s ) iff (C, A) is observable. For s / 0, the last mk columns are 
mutually independent as well as independent of the first n columns, thus the test 
matrix has a full rank. For s = 0, the rank condition (12) is satisfied iff l > mk and 
(C, A, B ) has no system zeros at s = 0. ■ 



Remark 2.1. The zeros mentioned in Theorem 1 are system zeros of ( C,A,B ), 
which include transmission zeros and input decoupling zeros (idz) [6]. The idz’s are 

J* 

simply the eigenvalues of A corresponding to the uncontrollable modes of (A, B ). 



Because (C, A) is observable, there are no output decoupling zeros. Note that B 



corresponds to failed actuators in failure pattern k; therefore, (A, B ) may not be 
controllable for all k. For the corresponding models, Theorem 1 requires that the 

fc. 

uncontrollable modes must not have zero eigenvalues. If (A, B ) is controllable, the 
system zeros are just the transmission zeros. 

Remark 2.2. In practical implementation, the estimation is performed in a discrete- 
time setting using discrete-time Kalman filters. The observability conditions of The- 
orem 1 are very similar, the only difference being that, in item (iii), the phrase “no 
zeros at the origin” is replaced by: “no zeros at unity” (for the discretized version 
of (C,A,B k )). 

Remark 2.3. The unobservable subspace O ^ of (C|, A|) can be obtained as follows 
(after some manipulation and using the fact that (C, A) is observable) 



Cf 

C|A| 


C'|(A|)(" +mfc_1 ) 


= J\f 


A B k 
C 0 


(13) 


where A I(.) denotes the null space. Thus the unobservable subspace of (C|,A|) 

£ 

consists of the generalized eigenvectors of (C, A, B ) corresponding to the zeros at 
the origin. If A is nonsingular, it can be seen that 



-A~ 1 B X2 

X2 


, x 2 6 R mk 


(14) 


For the case when A has one or more zero eigenvalues, the corresponding Oc is still 



non-trivial when (C, A, B ) has one or more zeros at the origin. 


4 



Remark 2.4. It is intuitively straightforward to see that a zero at the origin ad- 
versely affects the ability to estimate a constant fault value u, because input fre- 
quency components corresponding to the system zeros do not appear in the output. 
Furthermore, a set of initial conditions exist such that y(t) is identically zero. 


3 Sensor Bias 


Suppose there are no actuator failures but q of the l sensors have unknown sensor 
biases, (or are known to be prone to developing biases). Denote the bias-free part 
and the biased part of the sensor output vector as y\ and 1/2 respectively, and the 
corresponding output matrices as C\ £ Rd-<i) xn ^ C 2 £ R qxn . Then the sensor output 
equation is 


V = 


V 1 
y2 


Cx + w s 


C\x 

C2X + y 2 


+ w s 


(15) 


where 1/2 £ R q is the sensor bias vector and C = [Cj Cf^V • As was done in the 

£ 

case of linearly dependent columns of B , it is assumed that linearly dependent 
sensor outputs have been combined and C, C\, C 2 all have full row ranks. (Biases 
corresponding to linearly dependent sensors cannot be estimated individually and 
must be aggregated). 

For this sensor bias formulation, bias- and state-estimation does not require mul- 
tiple models and a bank of KBFs, but requires only one KBF. Upon augmenting the 
sensor bias \)2 to the state vector, the system becomes 


d 

X 


' A 

0 ' 


' B ' 

7]:= dt 

. £2 _ 

— 

0 

0 

r) + 

0 


u + w' 


'■=A v r) + B v u 
Cl ®(l-q)> 


y = 


c 2 


n + w s := C v r) + w s 


where w' denotes the augmented process noise vector. 


(16) 

(17) 


3.1 Sensor Fault Identifiability 

The bias estimation approach involves constructing a KBF for the augmented system 
(16), (17). As in the case of actuator faults, observability of {C n , A v ) is essential for 
the KBF to function correctly. The following theorem gives necessary and sufficient 
conditions for observability. 

Theorem 2. The pair (C v , A, ; ) is observable iff the following conditions are satisfied: 

(i) the pair (C, A) is observable, and 

(ii) all zero- frequency modes of A are observable with respect to the bias-free sensor 
outputs 


5 



Proof. Applying the PBH rank test, ( C 71 ,A V ) is observable iff 


rank 


si — A 0 
0 Sl q 

Cl 0 

C 2 I q 


= n + q for s = A(A) and s = 0 


( 18 ) 


The first n columns of the PBH test matrix are linearly independent Vs iff (C, A) 
is observable. For s / 0, the last q columns are mutually independent as well as 
independent of the first n columns. For s = 0, the rank of the test matrix is n + q iff 


rank 


si — A 0 
Ci 0 

C 2 I q 


= n + q 

s = 0 


Since elementary column operations do not change the column rank, 


rank 


si — A 0 
Ci 0 
C 2 Iq 


s=0 


rank 


rank 


si — A 0 
Ci 0 

C 2 I q 


s = 0 


si — A 0 
Ci 0 


In o 
-C 2 Iq 


(19) 


(20) 


Thus the rank of the PBH test matrix at s = 0 is n + q iff the first n columns are 
linearly independent for s = 0, i.e., iff the zero-frequency modes of A are observable 
with respect to Ci. ■ 

When all sensors have biases, i.e., q = l, (C^, A v ) is observable iff A has no zero 
eigenvalue, as stated below. 

Corollary 2.1. If all sensors have biases, (C v , Aq) is observable iff 
(i) (C, A) observable, and 


(ii) A has no zero eigenvalues. 

Remark 3.1. For the case when all sensors have biases, the condition that A should 
not have zero eigenvalues is rather restrictive, since many engineering systems have 
free integrators in their dynamics. However, there does not appear to be an obvious 
way of getting around this problem. Consider the effect of using output feedback 
which moves the eigenvalues away from the origin, i.e., 


u = -Gy = -G{Cx + y) 


(21) 


where G G R mxl , which gives the following closed-loop system (including the aug- 
mented state y); 


V 

y 


' A - BGC -BG 
0 0 
[C I]r) + w s 


A'^rj + w 
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(22) 

(23) 



The pair ( C V ,A ' ) is observable iff 


rank 


sI-A + BGC BG 
0 Ixn Sli 

c h 


= n + l for s = A (A — BGC ) and s = 0 (24) 


f 

' In -BG ' 

' si- A + BGC 

BG ' 

\ 

= rank 

si — A 0 

{ 

_ 0 Ii 

C 

Ii 

s=0 J 

c I, . 


Proceeding as in the proof of Theorem 2, the first n columns are linearly independent 
iff [C, {A — BGC)} is observable. For s / 0, the last l columns of the PBH test matrix 
are mutually independent as well as independent of the first n columns. For s = 0, 
since the rank of a matrix is unchanged by multiplication by an elementary matrix, 

rank 

IL u 4 J L v 4 J «=n J L 

(25) 

The rank is n + l iff A has no eigenvalue at the origin. Thus, using feedback to move 
the eigenvalue away from zero does not make the augmented closed-loop system 
observable. 

Remark 3.2. If A has one or more zero eigenvalues, the unobservable subspace 
of ( C V ,A V ) can be readily obtained. Defining T = [0 gx (;_ q ) I q ] T , the unobservable 
subspace is 

c r “ 

CA 0 

CA 2 0 


O ri =M 


CA n+ q~ x o 


(26) 


That is, if (x( ,x^) 1 6 O v , 


Cx i + r.T 2 = 0; [0\Ax\ = 0 


(27) 


where O = [C T , C T A T , . . . , C T A n lT ] T , which yields (since (C. A) is observable): 


Ax\ = 0; C\Xi = 0; C 2 X 1 + x 2 = 0 


(28) 


That is, x’i must be an eigenvector of A corresponding to a zero-frequency mode 
of A that is unobservable with respect to C\. If all zero- frequency modes of A are 
observable with respect to C \ , then x\ = 0, therefore, x 2 = 0, O-q = 0, and the 
augmented system is observable, which is consistent with Theorem 2. If some zero- 
frequency modes of A are not observable with respect to C \ , O r/ can be characterized 
as 


O v = 


x\ 

-C 2 x 1 


, X\ = eigenvector of A corresponding to unobservable 0-freq modes 


(29) 

Remark 3.3 In practice, the Kalman filter is implemented in a discrete-time setting, 
and the condition (ii) in Theorem 2 changes to: “all modes corresponding to A(^4) = 
1 are observable with respect to the bias-free sensor outputs” (for the discretized 
version of A). 
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4 Simultaneous Actuator Faults and Sensor Bias 

For the case with actuator fault pattern k, if q of the sensors have biases, the aug- 
mented system is given by 

' A B k 0 1 r B k ' 

■■= (f = 0 0 0 <^+ 0 u k + w" (30) 

. 0 0 0 J [ 0 

+ B k u k + w ' (31) 

C\ 0 0 1 „ /„ 0 \ 

y= Co 0 I <P + Ws = C v <p + w s (32) 

where w" is the augmented process noise vector. The following theorem gives nec- 
essary and sufficient conditions for observability. 

Theorem 3. The pair (C^,, A^) is observable iff 

(i) l>m k +q 

(ii) the pair (C, A) is observable, and 

(iii) the system (C\,A,B ) has no zeros at the origin. 

Proof. Applying the PBH rank test, (C^,, A v ) is observable iff 

' si- A -B k 0 
0 sl mk 0 

rank 0 0 sl q = n + m k + q for s = A (A) and s = 0. (33) 

Ci 0 0 

. C 2 0 I q _ 

The first n columns of the PBH test matrix are linearly independent for all s iff 
(C, A) is observable. For s / 0, the last m k + q columns are mutually independent as 
well as independent of the first n columns. For s = 0, the columns of the test matrix 
are linearly independent iff the columns of the following ( n + l ) x {n + m k -\- q) matrix 
(after applying elementary column operations as shown) are linearly independent: 

' si- A -B k 0 1 I" In o 0 1 r si- A -B k 0 

Cl 0 0 0 I mk 0 = Cl 0 0 (34) 

L c 2 o i q \ s=0 [-c 2 0 I q \ L 0 0 i q \ s=0 

The columns of the above matrix are linearly independent iff (i) and (iii) hold. ■ 

If all sensors have biases (q = /), condition (i) cannot be satisfied in the presence 
of one or more actuator failures and the system is unobservable. This represents 
a major limitation of this approach to FDI when actuator faults and sensor biases 
are simultaneously present, and suggests that some alternate techniques should be 
considered (perhaps for sensor FDI). 
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5 Conclusions 


This paper explored in detail a class of fault detection and identification (FDI) 
methods for bias- type faults in actuators and sensors, from the point of view of fault 
identifiability. The methods employ a bank of Kalman-Bucy filters (KBFs) to detect 
the faults, determine the fault pattern, and estimate the fault values. Each KBF 
is tuned to a different fault pattern. Necessary and sufficient conditions were pre- 
sented for identifiability of bias-type actuator faults, sensor faults, and simultaneous 
actuator and sensor faults. The results indicate that caution should be exercised to 
ensure fault identifiability for different fault patterns when using such methods. It 
was shown that FDI of simultaneous actuator and sensor faults is not possible using 
these methods when all sensors have biases. 
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